The Rising Geopolitical Cyber Power
Explore geopolitical shifts in cyberspace, examining active measures, critical infrastructure attacks, influence campaigns, and economic disruptions. Learn about challenges for defenders and the need for improved cybersecurity.
Cracking the Code - Hacking the Human Mind
Explore psychological techniques for effective networking and relationship building in cybersecurity, focusing on soft skills, persuasion, and intentional communication strategies.
How to Screw Up Your Incident Response Investigation in 10 Steps or Less
Learn common pitfalls in incident response investigations and how to avoid them, improving your cybersecurity preparedness and effectiveness in handling breaches.
Control of Unclassified Information in Non-Federal IT Systems - Or What You Don't Know
Explore the management of unclassified information in non-federal IT systems, uncovering crucial insights for data protection and compliance in diverse technological environments.
Why Should Your Employees Know How to Phish
Learn effective phishing techniques to enhance your organization's cybersecurity awareness and defense strategies against social engineering attacks.
Redesigning Password Authentication for the Modern Web
Explore modern web authentication, focusing on U2F, FIDO2, and WebAuthn. Learn about security challenges, design improvements, and the future of password-free systems.
Why Your Red Team Shouldn't Be Snowflakes
Explore strategies for effective red team operations, including maturity models, threat intel, and testing types. Learn to enhance cybersecurity preparedness and level up quickly.
Penetration Testing - The Good, Bad, and the Ugly of Vendor Management, Reporting, and R
Explore penetration testing strategies, vendor management, and reporting techniques for effective cybersecurity assessments and improved organizational security posture.
0Day to HeroDay - Bringing a Company from Scorched Earth to a Modern Security Organization
Transforming a company's security posture from vulnerable to robust, detailing strategies and best practices for building a modern, effective cybersecurity organization.
TLSv1.3 - Minor Version, Major Changes
Explore TLS 1.3's major improvements, including enhanced security, faster connections, and simplified handshake process. Learn about cipher suites and notable changes in this protocol version.
I PWN Thee - I PWN Thee Not
Explore social engineering tactics, insider threats, and security best practices with insights on employee empowerment and effective identification procedures in information security.
The Making of ch0mps
Explore the creation process of ch0mps, delving into its development, challenges, and innovative features in this insightful presentation.
Eval Villain - Simplifying DOM XSS and JS Reversing
Explore DOM XSS and JavaScript reversing techniques with insights on simplifying complex security concepts for practical application in web security.
Operationalizing the MITRE ATTCK Framework
Learn to operationalize the MITRE ATT&CK framework for both offensive and defensive cybersecurity. Explore techniques, tools, and analytical models to enhance your security strategy.
The Politics of Cyber
Explore the intersection of politics and cybersecurity, covering topics like collateral damage, cryptocurrencies in cyber conflicts, and evolving skill requirements in the field.
Markets in Malware - Adam Hogan
Explore markets in malware, examining labor specialization, financial trust, price discrimination, and governance in illegal economies. Insights on ransomware evolution and cybercriminal supply chains.
Securing the DOM from the Bottom Up
Explore techniques for securing the Document Object Model (DOM) from the ground up, enhancing web application security and preventing common vulnerabilities.
The TIP of the Stinger - Efficiently Using Threat Intelligence With TheHive
Explore efficient threat intelligence utilization with TheHive platform, enhancing cybersecurity practices and incident response capabilities.
Data Access Rights Exploits under New Privacy Laws
Explore data access rights exploits under new privacy laws, examining potential vulnerabilities and implications for personal information security and organizational compliance.
Calls to Arms - US Elections Hacking
Explore network, physical, workforce, and vendor security in US elections, examining strengths, issues, and actions to safeguard electoral integrity against hacking threats.
The Overlooked Cyber Security Risk - 3rd Party Risk Management
Explore third-party risk management in cybersecurity, uncovering overlooked threats and effective mitigation strategies to enhance your organization's security posture.